Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          K41GByiHaWY6Ir/HVr/MA827JmyT9G3W3ze2cp7/D48=
Subject key identifier:   DB:96:84:54:EA:AC:67:4E:07:DC:33:3A:45:61:C5:2E:B4:39:2C:A0
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       019CE5FEFD68F7EEAC8D74D702F77AA9DB4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1863
Signing time:             Fri 13 Mar 2026 07:00:19 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:19 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:19 +0000
Files and hashes:         1: H72aDLmziajxH7j-buUE4Es0RIo.roa (hash: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: 8AG09oxcRhy8RdOw8PD9w5nTpdQTF3ZXOUcf+Y+KuBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:fe:fd:68:f7:ee:ac:8d:74:d7:02:f7:7a:a9:db:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Mar 13 07:00:19 2026 GMT
            Not After : Mar 14 07:00:19 2026 GMT
        Subject: CN=db968454eaac674e07dc333a4561c52eb4392ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:68:8a:ac:92:04:aa:9b:7e:bd:b2:0d:d4:
                    bb:b0:1f:33:4a:b6:bc:6b:ea:c4:47:cd:e3:1b:d2:
                    45:f2:6f:29:86:c6:58:b2:33:ae:c5:37:5c:55:c7:
                    e2:0a:03:13:a0:5d:61:ba:24:d8:6a:31:4c:a0:cb:
                    56:1e:c9:6d:b7:2a:2c:b4:e9:49:dd:10:91:f6:57:
                    a7:69:f6:59:e8:b0:74:22:4d:2f:6d:93:d9:08:e9:
                    67:fc:54:a9:17:86:a7:f7:aa:16:14:e3:b6:a8:6f:
                    24:50:7e:fb:02:8a:ce:ff:0d:22:67:8a:74:92:20:
                    8a:de:90:29:e7:e2:da:3a:74:3e:7d:c1:44:af:51:
                    fd:3d:85:bd:b3:58:59:7e:e9:df:ed:28:98:f4:79:
                    e2:fb:25:0c:58:ce:7a:42:18:b5:0a:5e:d5:6b:ed:
                    e6:66:c4:50:be:d8:56:9d:5b:e8:16:b9:8e:d3:57:
                    f6:9e:e3:ef:25:30:d0:b0:53:95:dc:6e:34:14:21:
                    86:72:a0:b8:4f:91:0d:36:c0:1a:8c:e2:03:b6:cd:
                    08:14:a7:6f:cf:ef:27:66:37:04:1f:dd:a8:a0:2c:
                    5c:43:e8:d9:6d:0b:d8:af:0e:a9:97:bf:19:4f:37:
                    90:38:96:4e:11:1d:2f:73:64:5f:6f:1e:52:c1:14:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:84:54:EA:AC:67:4E:07:DC:33:3A:45:61:C5:2E:B4:39:2C:A0
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:f7:82:13:66:0b:40:8e:a4:33:43:16:1b:4d:02:c1:d5:
         d4:eb:e2:17:76:68:ae:dd:6f:c5:af:0a:0f:b2:da:7d:c5:bd:
         d8:3b:b2:bd:d9:12:4e:bd:80:70:3a:48:4f:7d:70:41:7a:47:
         14:b5:39:75:4b:f6:d5:00:72:35:c4:9d:b7:ef:37:30:df:6e:
         84:58:e0:a0:f2:3e:64:69:a0:b8:62:78:8c:cd:bd:fa:71:b6:
         89:fd:cc:bd:1e:c8:62:f4:06:45:2e:e2:6b:84:90:64:91:1c:
         df:65:ba:1d:61:1b:5f:88:38:a1:fe:d5:b4:46:14:e2:95:85:
         f4:d2:46:cc:48:aa:a1:63:95:8c:77:80:72:a5:32:a1:e0:8f:
         c1:c8:25:8c:33:f5:8b:88:c3:4e:9f:f1:0b:91:d7:b4:68:ec:
         86:55:2f:85:75:5c:b5:d7:2f:06:be:15:80:db:cb:ca:d6:e1:
         f3:12:cd:d8:dd:7b:de:c2:85:80:4b:93:ff:a9:a2:31:bd:d4:
         48:24:dd:98:e1:fd:54:0a:18:11:74:5c:b3:b8:9e:b3:1c:10:
         85:f0:d3:99:4c:82:83:f2:13:9c:70:b1:48:79:8c:0c:ae:d5:
         0f:77:09:4f:74:77:bd:98:8c:51:d8:87:44:d2:59:36:80:cd:
         3c:6c:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:39 2026 by rpki-client